Tools that need a step from you

devkit sync installs every tool the setup uses, pinned, in one run. A few of them are heavy (about 2.3 GB together) or need an account before they do anything, so this page says what each unlocks and what it still needs from you.

devkit doctor reports a missing tool as an error.

What you get

Tool	What it unlocks	Size
codex	/delegate codex — a second opinion from a different model on decisions and reviews	277 MB
dsh	/delegate dsh — DeepSeek as delegate, the fastest route for an approved spec	279 MB
pen	/pen-design — design a .pen canvas into token-bound code; brings the pencil MCP server	732 MB
headroom	headroom learn mines your own past sessions for recurring failures	272 MB
pandoc	/share — required to publish any Markdown file as an artifact	267 MB
archify	/share renders archify architecture fences	28 MB
osv-scanner	Dependency vulnerability scan over staged lockfiles during /commit	52 MB
cb	CrewBuddy task and document digests from the terminal	—

What each one still needs from you

The binary alone is not always enough:

• codex — a ChatGPT login (codex login) or an API key.
• dsh — a DeepSeek provider key in your environment.
• pen — pen login with your pen.dev subscription, never an agent API key (it bills every prompt), plus Pen.app, a download with no Homebrew cask. Details: Design with Pen. Pen's own chat runs on your Claude subscription instead: Pen on your Claude plan.
• cb — its release is in a private repository, so gh needs access to the onedot-digital-crew organization. Devkit checks access before downloading; when the login or access is missing it skips cb with a gh auth login next step and the sync still succeeds.
• bwrap — Linux only (the sandbox for Pi implement delegates); macOS uses the built-in Seatbelt and skips it.
• The others work the moment they are installed.

Installed by hand: agy for /research

/research gets its deep-research report from Google's Antigravity CLI (agy). Its installer is the vendor's own script, so devkit sync does not manage it:

text

curl -fsSL https://antigravity.google/cli/install.sh | bash
agy

The first agy run opens the browser for sign-in (over SSH it prints a URL and asks for the code). Without agy, /research still works but falls back to a short web search with at most five sources, and says so.

What happens without them

Each skill checks first and names the exact command — nothing half-runs:

• /share refuses a Markdown file without pandoc; it never publishes unrendered bytes. A ```mermaid fence stays a plain code block; archify is checked only when the document actually contains such a fence.
• /commit without osv-scanner commits anyway and reports the skipped scan.
• /delegate without the requested runtime names the missing one instead of silently choosing another.

Plugins install by default

Three Claude Code plugins ship with the setup and arrive on every devkit sync, no flag needed:

• memsearch — cross-session memory, so a later session can recall what an earlier one decided.
• i-have-adhd — action-first response shaping: the answer leads with the next step instead of a preamble.
• ponytail — the lazy-senior ladder for code: reuse, native and stdlib first, then the shortest diff. Needs node.

i-have-adhd and ponytail each write their opt-in flag exactly once. Delete ~/.claude/.i-have-adhd-always or ~/.claude/.ponytail-always and it stays off; devkit never recreates it.

Keeping them current

devkit tools --outdated lists every pinned tool whose upstream has moved on, devkit tools --upgrade moves them. An optional tool you never installed is skipped in both.